40a16b75e0
CI / test (pull_request) Successful in 16s
CI / review (anthropic--claude-4.6-sonnet, sonnet, SONNET_REVIEW_TOKEN) (pull_request) Successful in 31s
CI / review (gpt-5, security, ., rodin/security-patterns, SECURITY_REVIEW.md, SECURITY_REVIEW_TOKEN) (pull_request) Successful in 38s
CI / review (gpt-5, gpt, GPT_REVIEW_TOKEN) (pull_request) Successful in 49s
Move --doc-map path validation earlier in main() (before network I/O) so subprocess tests can exercise both error paths: - Path traversal: ../../../etc/passwd → 'resolves outside workspace' - Nonexistent file: nonexistent.yml → 'failed to resolve doc-map' Both tests follow the existing TEST_SUBPROCESS_MAIN=1 env gate pattern. Closes #146